azure-rbac

Design, implement, and troubleshoot Azure RBAC, ABAC, deny assignments, and PIM usage.

Updated Mar 18, 2026
One-click install
npx skills add https://github.com/mfcollins3/standup --skill azure-rbac-mfcollins3
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/mfcollins3/standup/tree/main/.github/skills/azure-rbac
Command: npx skills add https://github.com/mfcollins3/standup --skill azure-rbac-mfcollins3

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure RBAC and ABAC governance can be complex and error prone; this skill provides expert guidance to design, troubleshoot, and implement access control across Azure resources, helping teams minimize privilege creep and misconfigurations.

Core Features & Use Cases

  • Troubleshoot role assignments, deny assignments, and ABAC conditions to resolve access issues quickly.
  • Design least-privilege access models, built-in and custom role definitions, and scalable governance across subscriptions and resource groups.
  • Integrate with PIM, policy, and monitoring; provide decision-ready patterns and actionable guidance for code or infrastructure changes.

Quick Start

Explain your target Azure scope and I will generate a recommended RBAC setup plan.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design least-privilege Azure RBAC role assignments across subscriptions?

Troubleshoot Azure RBAC access issues by reviewing role assignments, deny assignments, and ABAC conditions. This skill guides you through resolving misconfigurations and privilege conflicts to quickly restore proper access control.

What is the difference between Azure RBAC and ABAC for access control?

Integrate Azure RBAC with Privileged Identity Management (PIM) to enable just-in-time access. This skill provides decision-ready patterns for activating and monitoring privileged roles to minimize standing access and misconfigurations.

How do I troubleshoot Azure RBAC deny assignments blocking access?

Troubleshoot Azure RBAC deny assignments by analyzing how they override allow permissions at specific scopes. This skill provides expert guidance to identify, interpret, and resolve deny assignment conflicts causing access failures.

Can I use Azure RBAC conditions to restrict resource access dynamically?

Yes, you can use Azure ABAC conditions to restrict resource access dynamically based on attributes. This skill guides you through implementing condition expressions and role API patterns to enforce granular, context-aware permissions.